Monthly Archives: August 2012

An introduction to Filters

While filters have always been a part of the Profiler, they are now partly exposed only with the upcoming 0.8.7 version. Shortly explained: filters are algorithms of different nature which can be applied to portions of data. The starting point … Continue reading

Posted in Filters, Profiler | Tagged | Comments Off on An introduction to Filters

Microsoft Authenticode

Based on RSA’s PKCS7 standard, Authenticode is the technology developed by Microsoft to digitally certify programs and drivers on Windows. Trusted signatures guarantee that the certificate owner is indeed the author of the signed executable, and also that the data … Continue reading

Posted in PE, Profiler | Tagged , , , | Comments Off on Microsoft Authenticode